Authenticated privilege escalation via XML external entities

XXE in Adobe Experience Manager allows remote authenticated users to gain elevated access to internal resources via XML input. The supplied source identifies unrestricted external entity references, but the affected parser, endpoint, and exact operation are not publicly established. Exploitation requires low-privileged access and no user interaction; the reported consequence is elevated access to internal resources, not established code execution.